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SYSTEM AND METHOD FOR 
COPY PROTECTION FOR DIGITAL SIGNALS 



1. Related Anplication 

This application claims the benefit of U.S. Provisional Apphcation No. 

60/070,764, filed January 8, 1998. 

2. Field of the Invention 

The present invention relates to copy protection of consumer electronics 
media, and more particularly to methods and arrangements for providing copy 
protection for audio-visual signals used in consumer electronics. 

3. Description of the Related Art 

The proliferation of digital technology in consumer electronics has 
provided a plethora of digital consumer technology products that provide superior 
performance relative to their analog predecessors. However, the distribution of 
audio-visual information in digital format coupled with the availability of digital 
recording devices raises concerns about the piracy of digital audio-visual products, 
particularly in the entertainment industry. In response to this concern, the MPAA 
(Motion Picture Association of America) has proposed copy protecting motion 
pictures released on Digital Video Disk (DVD) to prevent a purchaser fi-om 
purchasing a single copy and making and distributing multiple copies. 
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However, these concerns are not limited to audio-visual information 
released on DVD. Similar concems exist for other media, for example, cable 
television and broadcast television among others. 

Cable television distributors are concerned about protecting their 
transmissions. One approach has been to use conditional access to control the 
distribution of their transmission. Conditional access refers to controlling the 
distribution of information at user locations. An important difference between 
using conditional access and copy protection to control the distribution of material 
is that conditional access applies to particular distribution sites or nodes, while 
copy protection continues beyond the distribution sites or nodes. 

Another approach for protecting audio-visual information has been to 
encrypt an audio-visual signal and add the capability for receivers to decrypt the 
audio-visual signal. One problem with this approach is that the receivers often 
require complex functionality to perform the decrypting, for example in the case of 
public/private key encryption/decryption. 

Another proposal for copy protection of media has been provided by the 
Copy Protection Working Group (CPTWG) data transmission discussion group 
(DTDG) sub-committee for copy protection of Section 1394 technology. Section 
1394 technology refers to a lOOMbit/sec or 400 Mbit/sec bus protocol commonly 
applicable to consumer electronics. 



Another proposal is being developed by the National Renewable Security 
Standards Committee (NRSSC) # an interim standard of EIA (Electronics Industry 
Associates) security (IS679) that defines two interfaces for removable condition 
access security. These include what are referred to as a "smart card" and a 
PCMCIA card. 

Figure 1 illustrates a conventional arrangement 100 for copy protecting an 
audio-visual signal using a replaceable security module that is coupled to a receiver 
via an IS679 interface. One or more audio-visual signals, identified as AVSi, 
through AVSn, are provided to a transmitter 102, typically at rates in the range of 
6Mbits/sec to 100 Mbits/sec. Audio-visual signals AVS,, AVSj through AVSn, are 
encoded by encoders E,, Ej through E^ respectively, using for example, MPEG 
encoding techniques, and separated into audio signals ASi, through ASn and video 
signals VSi, VS2 through VS^. 

Audio signals ASi, AS2 through ASn and video signals VSi, VS2 through 
VSn are then encrypted by scramblers S,, S2, through S^ respectively, using for 
example, any number of widely available key encryption techniques. The 
encrypted audio signals ASi,AS2 through AS^ and video signals VSi, VS2 through 
VSn then combined by a combiner 104 into a single audio-visual signals. 
Combiner 104 may include several processes such as multiplexers and other 
processors necessary to provide the single audio- visual signal. 



The single audio-visual signal is then provided to a receiver 106 via a link 
108. Link 108 can include one or more communication mediimis and/or systems 
and supporting apparatuses that are configured to carry the single audio-visual 
signal between transmitter 102 and receiver 106. Examples of link 108 include, 
but are not limited to, a telephone system, a cable television system, a broadcast 
television system (direct or indirect), a satellite broadcast system (direct or 
indirect), one or more computer networks and/or buses, the Internet, an intranet, 
and any software, hardware and other communication systems and equipment 
associated therewith for transmitting encoded data between two locations. 



^ AfteESeg iiving the oinglo audio - visual 3ignal, T cccivcr 106 transmits thcr 
audio-visual signal to a replaceable security module 110 via an interface 112. For 
IS679 applications, replaceable security nijz^dule 1 10 is a smart card or a PCMCIA 
card that is communicatively coupled to receiver 106 via an IS679 compatible 
interface 112. However, other types of interfaces may also be used to couple 
15 replaceable security module 110 to receiver 106. Replaceable security module 110 

includes a de-scrambles4 14 that removes the encryption placed into the encoded 
audio signals ASj, ><S2 through AS^ and video signals VSj, VS2 through VSNby 
scramblers S1/S2 through S^. The de-scrambled single audio-visual signal is then 
returned to receiver 106 and decoded with a decoder 116 contained in receiver 106. 
2 0 The jte-scrambled and decoded audio-visual signal is then provided to a display 

displayed ui utlierwice viewed« ^ 
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One of the advantages of using this approach is that all of the de- 
scrambling operations are performed in replaceable security module 110. This 
allows manufacturers to provide standard receivers without specialized de- 
scrambling. For IS679 applications, the replaceable security modules may be in 
the form of a smart card or a PCMCIA card, providing "personalized" security. 

Despite the advantages of this approach, it is not without its own 
disadvantages and limitations. One disadvantage to this approach is that in 
situations where interface 1 12 is accessible, the de-scrambled audio-visual signals 
can be redistributed to other locations and then decoded and displayed, 
circimiventing the copy protection. For example, in the case of a DVD player that 
uses a replaceable security module as illustrated in Figure 1, if interface 1 12 can be 
accessed, then the de-scrambled (unprotected) audio-visual signal can be 
distributed to multiple receivers and display devices and even recorded and 
redistributed. 

Based upon the need to provide copy protection of audio-visual signals in 
IS679 application and the limitations in the prior approaches, an approach for 
providing copy protection of audio-visual signals IS679 applications that avoids 
the problems associated with the prior approaches is highly desireable. 



SUMMARY OF THE INVENTION 

In general, embodiments of the present invention provide for the copy 
protection of distributed material after conditional access is applied, regardless of 
where the material is distributed. The solutions described herein provide the 
advantage of being sufficiently simple in implementation to qualify what is known 
in the art as "curb high" solutions. "Curb high" solutions provide a range of 
security from minimal security to a high level of security while requiring relatively 
fewer system resources to implement than prior approaches. 

The method of the preferred embodiment of the present invention for copy 
protecting a digital signal representing audio-visual information, comprises the 
steps of: (a) encoding the digital signal to obtain an encoded signal; (b) 
converting the encoded signal into a copy protected signal using a copy protection 
function, wherein the function utilizes a data signal representing copy protection 
data; and (c) scrambling the copy protected signal to obtain a scrambled signal. 

The system of the preferred embodiment of the present invention for 
recovering an audiovisual signal from a digital signal including a scrambled signal 
and a copy protection data signal representing copy protection data, comprises a 
receiver and a descrambler module interconnected via a link. 

The descrambler module includes: 



(1) a first communication interface for commimicating 
with the receiver via the link; and 



(2) a descrambler for descrambling an incoming 
scrambled signal from the receiver via the link. 

5 The receiver includes: 

(1) a second communication interface for 

. ; 

]zi communicating with the descrambler module via the link, 

! ' J? 

! -V 

J (2) a processor for: (i) removing said data signal from 

the digital signal, and storing the copy protection data 
ii) represented by the data signal in a memory device, (ii) 

=13 extracting said scrambled signal from the digital signal, and 

providing the scrambled signal to the descrambler via the 
link; and 

(3) a reconverter for converting an incoming copy protected 
1 5 signal from the descrambler back into said audiovisual 

signal using an inverse copy protection fimction, wherein the 
inverse function utilizes said stored copy protection data. 
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In this preferred embodiment of the present invention, the signals flowing 
from the descrambler module to the receiver via the link are protiected against 
copying. 

BRIEF DESCRIPTION OF THE DRAWINGS 

The above and other features, organizations, advantages and objects of the 
present invention, which are believed to be novel, are set forth with particularity in 
the appended claims. The present invention, both as to its organization and manner 
of operation, together with further objects and advantages, will be fully understood 
from the following detailed description and the accompanying drawings. Each of 
the drawings contained herein are not considered to be accurate depictions of the 
embodiments of the invention, but are provided for illustrative purposes only and 
are to be interpreted in conjunction with the attached specification. 

Figure 1 illustrates a conventional arrangement for copy protecting an 
audio-visual signal using a replaceable security module that is coupled to a receiver 
via an IS679 interface. 

Figure 2 illustrates an arrangement for copy protecting audio-visual signals 
using a replaceable security module according to a preferred embodiment of the 
present invention. 



Figure 3 is a block diagram of an arrangement that illustrates a second 
preferred embodiment of the present invention. 

Figure 4 is a block diagram that illustrates a computer system upon which a 
preferred embodiment of the invention may be implemented. 

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS 

The following description is provided to enable any person skilled in the art 
to make and use the invention and sets forth the best modes presently contemplated 
by the inventors of carrying out the invention. Various modifications, however, 
will remain readily apparent to those skilled in the art, since the generic principles 
of the present invention have been defined herein. 

Figure 2 illustrates an arrangement 200 for copy protecting audio-visual 
signals using a replaceable security module according to a preferred embodiment 
of the present invention. One or more audio-visual signals, identified as AVSi, 
AVSs through AVSn are provided to a transmitter 202, typically at rates in the 
range of 6Mbits/sec to lOOMbits/sec. Audio-visual signals AVSj, AVSj through 
AVSn are encoded by encoders Ei, through respectively contained in 
transmitter 202, using, for example, MPEG encoding techniques, and separated 
into audio signals ASi, AS2 through AS, and video signals VS], VS2 through VSn. 
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A function is applied to audio signals ASi, AS2 through AS^ and video 
signals VSi, VS2 through VS^, by function modules, Fi, through F^ respectively 
to add copy protection. Copy protection data CP DATA is provided to transmitter 
202 and used by function modules F,, Fj through F^ to apply the function to audio 
signal AS I, AS2 through ASi and video signals VSj, VS2 through VS^. 

After being processed by function modules F,, F2 through Fn, audio signals 
AS,, AS2 through AS^ and video signals VSi, VS2 through VS^, are encrypted by 
scramblers S,; S2 through S^ respectively using for example, any nvmiber of widely 
available key encryption techniques and copy of protection data CP DATA. 
Encryption information required by scramblers S,, S2 through Sn, such as for 
example, encryption key information, is provided by a conditional access 
management system (not illustrated) that is typically included in transmitter 202, 
but may reside elsewhere. 

The encrypted audio signals AS,, AS2 through AS^f, video signals VS,, VS2 
through VSn and copy protection data CP DATA are then combined by a combiner 
204 to provide a single audio-visual signal. Thus, the copy protection data CP 
DATA is included in the single audio-visual signal. Combiner 204 may include 
several processors, such as multiplexers and other processors, necessary to provide 
the single audio-visual signal. 



The single audio-visual signal is then provided to a receiver 206 via a link 
208. As with link 108 of Figure 1, link 208 can include one or more 
communication mediimis or systems, or both, and supporting apparatuses that are 
configured to carry the single audio-visual signal between transmitter 202 and 
receiver 206. Examples of link 208 include, but are not limited to, a telephone 
system, a cable television system, a broadcast television system (direct or indirect), 
a satellite broadcast system (direct or indirect), one or more computer networks 
and/or buses, the Internet, an intranet, and any software, hardware and other 
communication systems and equipment associated therewith for transmitting 
encoded data between two locations. 

When receiver 206 receives the audio-visual signal via link 208, the copy . 
protection data CP DATA is removed fi-om the audio-visual signal by processor 
210. For applications where the audio-visual signal on link 208 is formatted in 
packets, processor 210 extracts one or more data packets containing the copy 
protection data CP DATA from the audio-visual signal and replaces them with data 
packets containing predetermined data, such as NULL values. For example, data 
packets containing copy protection data CP DATA may have a predetermined data 
packet identification, so that they can be easily identified by processor 210. 

Then the single audio-visual signal is provided to a replaceable security 
module 212 via an interface 214. For IS679 applications, replaceable security 
module 212 is a smart card or a PCMCIA card that is communicatively coupled to 
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receiver 206 via an IS679 compatible interface 214. Replaceable security module 
212 includes a de-scrambler 216 that removes the encryption placed into the 
encoded audio signals AS,, ASj through AS^ and video signals VSj, VS2 through 
VSn by scramblers S,, S2 through S^. 

The de-scrambled single audio-visual signal is then returned to receiver 206 
via interface 214. Thus, the de-scrambled audio-visual signal received by receiver 
206 from replaceable security module 212 does not contain the encryption 
provided by scramblers S,, S2 through Sn but does still contain the copy protection 
applied by function modules F,, F2 through F^. 

The de-scrambled audio-visual signal is then provided to function block F'* 
that applies an inverse function to F"^ to remove the copy protection applied by 
function modules Fj, F2 through F^ using the copy protection data CP DATA that 
was extracted from the audio-visual signal by processor 210. According to the 
preferred embodiment of the present invention, function block F * bases the 
application of the inverse function F"* to the de-scrambled audio-visual signal on 
the presence of data packets containing the predetermined value. For example, 
when function block F'^ identifies a data packet that contains the predetermined 
value, the new copy protection data CP DATA retained by receiver 206 is used by 
function block F'* to apply the inverse function F'^ to the subsequent data packets 
until the next data packet containing the predetermined value is identified. 
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The de-scrambled audio-visual signal is then decoded by a decoder 218 
contained in receiver 106. The de-scrambled and decoded audio-visual signal is 
then provided to a display 220 to be displayed or otherwise viewed. 

This approach of the preferred embodiment of the present invention 
provides several important advantages over prior approaches for providing copy 
protection of audio-signal. First, this approach provides a higher level of security 
than the prior art approach described with reference to Figure 1, because the de- 
scrambled signal provided by replaceable security module 212 contains the copy 
protection provided by function modules F,, F2 through F^,, but does not contain 
the copy protection data CP DATA, which was removed by processor 210. Once 
removed from the audio-visual signal, the copy protection data CP DATA is 
maintained intemally in receiver 206. Thus, the de-scrambled signal provided by 
replaceable security module 212 cannot be used by other receivers and/or recording 
devices, even those that contain a function block equivalent to function block F * 
because they will not have access to copy protection data CP DATA, which can be 
periodically changed. 

In addition, this copy protection approach is very flexible and allows 
receiver manufacturers to continue a standard design without special components 
or algorithms, since processor 210 and function block F * may be implemented as 
standard components. The copy protection functionality, including the level of 
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copy protection, is defined by the copy protection data CP DATA provided to 
transmitter 202. 

Thus, function modules F,, F2 through may perform a relatively simple 
function, such as an exclusive OR logical operation (XOR). The advantage of 
using a simple function is that relatively fewer system resources are required to 
implement the F and F"* functions compared to conventional approaches that use 
sophisticated encryption algorithms. However, more exotic functions may be used 
depending upon the level of copy protection desired for a particular application, hi 
the context of MPEG2 encoding, a single packet of 184 bytes of data may be used 
to perform an XOR function of 64 to 1000 bits. Moreover, the copy protection 
data CP DATA may be changed as frequently as needed upon the requirements of 
a particular application. 

According to a second preferred embodiment of the present invention, the 
copy protection data CP DATA is not included in the audio-visual signal, but 
instead is generated intemally by the receiver and provided to the replaceable 
security module. Figure 3 is a block diagram of an arrangement 300 that illustrates 
this approach. A receiver 302 receives an audio-visual signal (AVS) that is 
provided to a replaceable security module 304 via an IS679 interface 306. 

Replaceable security module includes a de-scrambler 308 for de-scrambling 
the AVS signal. The AVS is then provided to a function module F that copy 
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protects the AVS by applying a function to AVS using copy protection data to 
generate a processed AVS. The CP DATA is randomly generated by receiver 302 
and provided to replaceable security module 302. 

The processed AVS is provided back to receiver 302 via interface 306 
where a function module F * applies a function using the copy protection data CP 
DATA to remove the copy protection previously applied by function module F. 
The AVS data is then decoded by a decoder D and provided to display 310 to be 
displayed or otherwise viewed. This approach avoids having to include the copy 
protection data CP DATA in the AVS. Since the copy protection data CP DATA 
can be randomly generated, the use of specialized components or algorithms in 
receiver 302 is still avoided. 

Although embodiments of the invention have been described herein in the 
context of providing copy protection for the IS679 interface application, the 
approaches described herein are applicable to other audio-visual arrangements. In 
addition, the approaches described herein are applicable to other types of signals 
and information besides audio-visual signals. 

The various components described above may be implemented as discrete 
hardware components, one or more software processes, or a combination of 
discrete hardware components and on or more software processes. In this regard. 
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Figure 4 is a block diagram that illustrates a computer system 400 upon which an 
embodiment of the invention may be implemented. 

Computer system 400 includes a bus 402 or other commimication 
mechanism for communicating information, and a processor 404 coupled with bus 
402 for processing information. Computer system 400 also includes a main 
memory 406, such as a random access memory (RAM) or other dynamic storage 
device, coupled to bus 402 to storing information and instmctions to be executed 
by processor 404. Main memory 406 also may be used for storing temporary 
variables or other intermediate information during execution of instructions to be 
executed by processor 404. 

Computer system 400 further includes a read only memory (ROM) 408 or 
other static storage device coupled to bus 402 for storing static information and 
instructions for processor 404. A storage device 410, such as a magnetic disk or 
optical disk, is provided and coupled to bus 402 for storing information and 
instructions. 

Computer system 400 may be coupled a via bus 402 to a display 412, such 
as a cathode ray tube (CRT), for displaying information to a computer user. An 
input device 414, including alphanumeric and other keys, is coupled to bus 402 for 
commxmicating information and command selections to processor 404. Another 
type of user input device is cursor control 416, such as a mouse, a trackball, or 
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cursor direction keys for communicating direction information and command 
selections to processor 404 and for controlling cursor movement on display 412. 
This input device typically has two degrees of freedom in two axes, a first axis 
(e.g., x) and a second axis (e.g., y), that allows the device to specify positions in a 
plane. 

The embodiments of the present invention are related to the use of 
computer systems 400 for providing copy protection of audio-visual signals in 
TS679 applications. According to one preferred embodiment of the invention, the 
copy protection of audio-visual signals in IS679 applications is provided by 
computer system 400 in response to processor 404 executing one or more 
sequences of one or more instructions contained in memory 406. Such instructions 
may be read into main memory 406 from another computer-readable medium, such 
as storage device 410. Execution of the sequences of instructions contained in 
main memory 406 causes processor 404 to perform the process steps described 
herein. One or more processors in a multi-processing arrangement may also be 
employed to execute the sequences of instructions contained in main memory 406. 
In alternative embodiments, hard-wired circuitry may be used in place of or in 
combination with software instructions to implement the embodiments of the 
present invention. Thus, embodiments of the present invention are not limited to 
any specific combination of hardware circuitry and software. 
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The term "Computer-readable medium" as used herein refers to any 
medium that participates in providing instructions to processor 404 for execution. 
Such a medium may take many forms, including but not limited to, non-yolatile 
media, volatile media, and transmission media. Non-volatile media includes, for 
example, optical or magnetic disks, such as storage device 410. Volatile media 
includes dynamic memory, such as main memory 406. Transmission media 
includes coaxial cables, copper wire and fiber optics, including the wires that 
comprise bus 402. Transmission media can also take the form of acoustic or light 
waves, such as those generated during radio wave and infrared data 
commimications. 

Common forms of computer-readable media include, for example, a floppy 
disk, a flexible disk, hard disk, magnetic tape, or any other magnetic medium, a 
CD-ROM, any other optical medium, punch cards, paper tape, any other physical 
medium with pattems of holes, a RAM, PROM, and EPROM, a FLASH-EPROM, 
any other memory chip or cartridge, a carrier wave as described hereinafter, or any 
other medium from which a computer can read. 

Various forms of computer readable media may be involved in carrying one 
or more sequences of one or more instructions to processor 404 for execution. For 
example, the instructions may initially be carried on a magnetic disk of a remote 
computer. The remote computer can load the instructions into its djoiamic memory 
and send the instructions over a telephone line using a modem. A modem local to 
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computer system 400 can receive the data on the telephone line and use an infrared 
transmitter to convert the data to an infrared signal. An infrared detector coupled 
to bus 402 can receive the data carried in the infrared signal and place the date on 
bus 402. Bus 402 carries the data main memory 406, from which processor 404 
retrieves and executes the instructions. The instructions received by main memory 
406 may optionally be stored on storage device 410 either before or after execution 
by processor 404. 

Computer system 400 also includes a communication interface 418 coupled 
to bus 402. Communication interface 418 provides a two-way data commimication 
coupling to a network link 420 that is connected to a local network 422. For 
example, communication interface 418 may be an integrated services digital 
network (ISDN) card or a modem to provide a data communication connection to a 
corresponding type of telephone line. As another example, communication 
interface 418 may be a local area network (LAN) card to provide a data 
communication connection to a compatible LAN. Wireless links may also be 
implemented. Li any such implementation, communication interface 418 sends 
and receives electrical, electromagnetic or optical signals that carry digital data 
streams representing various types of information. 

Network link 420 typically provides data communication through one or 
more networks to other data devices. For example, network link 420 may provide 
a connection through local network 422 to a host computer 424 or to data 
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equipment operated by an Internet Service Provider (ISP) 426. ISP in turn 
provides data communication services through the world wide packet data 
communication network now commonly referred to as the "Internet" 428. Local 
network 422 and Internet 428 both use electrical, electromagnetic or optical signals 
that carry digital data streams. The signals through the various networks and the 
signals on network link 420 and through communication interface 418, which carry 
the digital data to and from computer systems 400, are exemplary forms of carrier 
waves transporting the information. 

Computer system 400 can send messages and receive data, including 
program code, through the network(s), network link 420 and communication 
interface 418. In the Internet example, a server 430 might transmit a requested 
code for an application program through Internet 428, ISP 426, local network 422 
and communication interface 418. In accordance with the invention, one such 
downloaded application provides for providing copy protection of audio-visual 
signals in IS679 applications as described herein. 

The received code may be executed by processor 404 as it is received, 
and/or stored in storage device 410, or other non- volatile storage for later 
execution. In this matter, computer systems 400 may obtain application code in 
the form of a carrier wave. 
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4 

In the foregoing specification, the invention has been described with 
reference to specific embodiments thereof. It will, however, be evident that 
various modifications and changes may be made thereto without departing fi-om 
the broader spirit and scope of the invention. The specification and drawings are, 
accordingly, to be regarded in an illustrative rather than a restrictive sense. 
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